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Reply to Office Action of December 27, 2006 



Ari David Kaplan 
Appl. No. 10/040,524 



Amendments to the Claims 



The listing of claims will replace all prior versions, and listings of claims in the 
application. 

1 -28. (Previously Cancelled), 

29. (Currently Amended) A wireless database management system, comprising: 

a first server providing a first virtual private network (VPN) and providing 
Internet access to cli e nt h e ld user-held wireless communication applianc e s 
devices operating within an intranet environment , the VPN limiting access to a 
subset of the wireless communication applianc e s devices that subscribe to the 
VPN; and 

a second server providing a second VPN with access to the Internet and 
providing access to one or more databases associated with the subscribing subset 
of wireless communication devices; 

wherein operation of the first VPN and second VPN creates a VPN tunnel 
in the Internet restricted to data addressed to or from the subscribing subset of 
wireless communication applianc e s devices ; and 

wherein the user-held wireless communication appliances devices 
operating within the intranet environment include at least one of a personal 
digital assistant (PDA), cell phone, two-way pager or other mobile, hand-held, 
personal communication device. 

30. (Previously Cancelled). 

31. (Currently Amended) The wireless database management system of claim 29 
wherein the first virtual private network (VPN) operating on the first server 
providing Internet access to cli e nt h e ld user-held wireless communication 
appliances devices is a VPN-controlled wireless proxy server securing data 
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transferred between the cli e nt h e ld user-held wireless communication appliances 
devices and the Internet. 

32. (Currently Amended) The wireless database management system of claim 29, 
wherein the data transfers between the server providing Internet access to cli e nt 
held user-held wireless communication applianc e s devices are encrypted with a 
public key method. 

33. (Previously Presented) The wireless database management system of claim 29, 
wherein the data transfers between the second server with access to the Internet 
and providing access to one or more databases associated with the subscribing 
subset of wireless communication devices are encrypted with a private key 
method. 

34. (Currently Amended) The wireless database management system of claim 29, 
wherein users of the wireless communication applianc e s devices are 
authenticated before allowing access to the databases. 

35. (Currently Amended) The wireless database management system of claim 29, 
wherein software is implemented on the second server with access to the Internet 
and providing access to one or more databases sets an adjustable timeout for 
connections between the wireless communication applianc e s devices and the 
server. 

36. (Currently Amended) The wireless database management system of claim 35, 
wherein the second server identifies a session between the wireless 
communication applianc e s devices and the second server with a session 
identification phrase, and storing the session identification phrase in memory. 

37. (Previously Presented) The wireless database management system of claim 29, 
wherein a firewall is implemented between the Internet and the second server 
connected to the databases, thereby limiting access to IP addresses of the wireless 
communication devices. 
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38. (Previously Presented) The wireless database management system of claim 37, 
wherein a second firewall is implemented between the second server and the 
databases. 

39. (Currently Amended) A method for securing data transfers in a wireless database 
management system, comprising steps of: 

(a) providing a first server including a virtual private network (VPN) 
and providing Internet access to cli e nt h e ld user-held wireless communication 
applianc e s devices operating within an intranet environment , the VPN limiting 
access to a subset of the wireless communication applianc e s devices that 
subscribe to the VPN; 

(b) providing a second server including a VPN with access to the 
Internet and providing access to one or more databases associated with the 
subscribing subset of wireless communication devices; and 

c) operating the first and second server VPNs to create a VPN tunnel 
in the Internet restricted to data addressed to or from the subscribing subset of 
wireless communication appliances devices ; 

wherein the user-held wireless communication applianc e s devices 
operating within the intranet environment include at least one of a personal 
digital assistant (PDA), cell phone, two-way pager or other mobile, hand-held, 
personal communication device. 

40. (Previously Cancelled). 

41. (Currently Amended) The method of claim 39 wherein in step a), the first server 
providing Internet access to cli e nt h e ld user-held wireless communication 
applianc e s devices is a VPN-controlled wireless proxy server securing data 
transferred between the client held user-held wireless communication appliances 
devices and the Internet. 
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42. (Currently Amended) The method of claim 39 wherein in step a) the data 
transfers between the first server providing Internet access to cli e nt h e ld user- 
held wireless communication applianc e s devices are encrypted with a public key 
method. 

43. (Previously Presented) The method of claim 39 wherein in step b) the data 
transfers between the second server with access to the Internet and providing 
access to one or more databases associated with the subscribing subset of 
wireless communication devices are encrypted with a private key method. 

44. (Currently Amended) The method of claim 39, further providing a step of 
authenticating users of the wireless communication applianc e s devices before 
allowing access to the databases. 

45. (Currently Amended) The method of claim 39 wherein in step b) an adjustable 
timeout is provided for connections between the wireless communication devices 
applianc e s and the second server. 

46. (Currently Amended) The method of claim 39, further providing a step for 
identifying a session between the first server and the wireless communication 
applianc e s devices of step a) with a session identification phrase, and storing the 
session identification phrase in memory. 

47. (Currently Amended) The method of claim 39 wherein in step b) a firewall is 
provided between the Internet and the second server connected to the databases, 
thereby limiting access to [[IP]] IP addresses of the wireless communication 
devices. 

48. (Previously Presented) The method of claim 47 wherein a second firewall is 
implemented between the second server and the databases. 
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